Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: Fsi1b2VTg+GwHbd2PLEYjLMMdwy4Kyr9K/SOedZ5QhU=
Subject key identifier: 5C:DA:C8:60:DF:8F:9D:FE:42:3B:42:68:9D:4E:1C:D0:59:2D:3F:33
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 01935350DDAC1A7B4644675FA762D54A1F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 0257
Signing time: Fri 22 Nov 2024 10:00:28 +0000
Manifest this update: Fri 22 Nov 2024 10:00:28 +0000
Manifest next update: Sat 23 Nov 2024 10:00:28 +0000
Files and hashes: 1: VPtZEgucGmg1A6088IHIhJG8dtU.roa (hash: vB/KSn2KhPK8DuqClo57MQGkbcT9yRi50a7bSXneY84=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: JrPnRzYMmXDgH7IbJWZ7Rnxg564eCUFo6/ucyRM3QR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:50:dd:ac:1a:7b:46:44:67:5f:a7:62:d5:4a:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Nov 22 10:00:28 2024 GMT
Not After : Nov 23 10:00:28 2024 GMT
Subject: CN=5cdac860df8f9dfe423b42689d4e1cd0592d3f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:f4:80:4a:51:df:0c:8d:8d:ef:78:77:1c:
41:51:35:00:0d:fe:e4:3b:2d:d8:08:3b:f7:27:35:
0e:94:37:6b:35:73:1b:87:a7:54:53:27:3c:a6:95:
1e:de:97:0b:c8:3b:87:ea:54:a8:e7:eb:c5:1c:04:
94:83:d4:f6:84:b2:66:e2:cb:4d:6f:68:fa:c2:8b:
96:07:ed:44:eb:40:21:7f:cf:82:b8:34:94:28:d0:
51:cc:0a:3f:62:13:d7:be:ef:23:ab:c9:ea:55:d8:
a7:f6:4e:bd:c3:b8:ef:88:25:a8:2a:31:53:a5:0a:
47:8c:5c:c1:45:bf:6c:5d:6c:bf:e7:79:02:81:a1:
b2:d4:36:0c:ef:d1:02:cd:22:78:1b:e4:71:20:2f:
fc:51:9c:0c:7a:a0:bc:42:38:34:d2:03:8d:22:cd:
76:40:e9:95:6c:ba:63:b4:fb:a0:6d:96:e0:0c:8c:
4e:5f:a9:6d:37:ed:cd:9e:d9:da:cb:13:1b:5a:4e:
c5:d1:78:5b:44:c4:aa:19:23:da:8d:2d:b2:28:a4:
b1:3a:5e:09:60:20:b9:04:ea:e5:31:be:da:73:1c:
3a:95:74:68:ca:10:0c:71:83:5e:d0:75:c2:fe:68:
87:e2:2c:02:38:59:d5:87:75:6d:b0:dd:98:73:3f:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:C8:60:DF:8F:9D:FE:42:3B:42:68:9D:4E:1C:D0:59:2D:3F:33
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fd:46:15:a7:f0:4d:23:ef:d2:0b:8b:b9:53:c4:09:b9:be:
a1:a8:a5:f7:46:71:49:16:bd:ef:9a:09:1a:6d:82:3b:42:b3:
7b:02:89:35:93:76:c4:d2:c2:7f:c4:ed:23:be:99:64:3d:15:
6f:ca:f2:60:06:a7:39:f0:52:a8:8b:55:34:93:ac:44:5f:af:
09:15:e5:1a:f6:25:4a:65:d1:8b:7b:50:88:8c:48:7d:91:f8:
c4:72:f2:87:34:b1:d2:d9:3f:c4:ac:7d:77:8e:4f:7c:cc:36:
f8:50:2f:65:24:b4:57:83:01:c3:d7:76:e9:77:29:96:a0:42:
aa:93:8b:6a:18:56:cd:af:15:f4:f9:0d:34:e5:37:97:7e:76:
42:35:a9:80:aa:54:3f:ef:59:62:d4:35:8b:f3:6c:7f:d8:cf:
9b:f0:c1:93:6e:db:61:e7:1d:79:4a:b6:40:39:3c:d5:19:62:
dd:08:47:3e:3a:2e:68:25:22:c4:d3:f1:38:66:6f:52:87:54:
9a:f5:e6:bc:1a:ab:27:62:fc:94:74:b5:8e:b2:4f:3b:8b:b4:
d6:67:bd:de:c2:d1:77:9c:c2:b8:ca:7f:3d:b1:92:1e:84:82:
1a:bc:f8:fb:56:5b:db:e2:7a:59:d1:c0:71:1e:42:71:be:28:
81:fe:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:38:16 2024 by rpki-client on console-ams.rpki-client.org